Tambor

Privacy Policy

Last updated: 2026

Tambor is a paid warm-introduction marketplace. This policy explains what we collect, how we use it, who we share it with, and how long we keep it.

What we collect

  • Account identifiers — email and display name for connectors, admins, and buyers.
  • Connector-supplied relationship data — the people a connector can introduce (name, company, title, optional LinkedIn URL, and an encrypted email), plus the connector's declared relationship strength, tenure, recency, and price.
  • Buyer-supplied intro context — the free-text reason for an introduction request. We never execute instructions found in this text; it is treated as data only.
  • Payment metadata from Stripe (customer, payment-intent, and transfer identifiers). We never see or store full card numbers.
  • An append-only audit log of intro-request lifecycle events.

How we use it

To broker double-opt-in introductions, to authorize and capture escrowed payments, and to send transactional email (sign-in links, delivery confirmations, payout confirmations). Before a connector accepts a request, buyers see only an anonymized summary — never a connector or target name, email, or LinkedIn URL.

Third parties

We share data only as needed to operate the marketplace: Stripe (payments, escrow, and connector payouts) and Resend (transactional email). We do not sell personal data, and we do not use customer data to train AI models.

Storage & retention

Data is stored in Postgres. Target emails are encrypted at rest (AES-256-GCM). OAuth tokens and authorization codes are stored only as hashes. We retain records as needed to operate the marketplace and meet legal and financial obligations; connectors and buyers may request deletion of their data.

Security

All traffic is served over TLS. The MCP server is an OAuth 2.1 protected resource (PKCE, short-lived access tokens, hashed token storage, strict scope checks). Webhooks and consent links are signature-verified. We log no card data and no personal identifiers.

Contact

Questions or deletion requests: privacy@tambor.dev.